From: sashiko-bot@kernel.org
To: "Zack Rusin" <zack.rusin@broadcom.com>
Cc: virtualization@lists.linux.dev,
"Michael S. Tsirkin" <mst@redhat.com>,
"Eugenio Perez" <eperezma@redhat.com>
Subject: Re: [PATCH] x86/vmware: Map vTPM as private in encrypted VMs
Date: Tue, 03 Nov 2026 08:00:14 +0000 [thread overview]
Message-ID: <sashiko-outbox-194785@kernel.org> (raw)
In-Reply-To: <e0e5389688fe4102b639c42295305e08f306a092.1793692366.git.zack.rusin@broadcom.com>
> From: Alex James <alex.james@broadcom.com>
>
> Encrypted VMware guests can use a virtual Trusted Platform Module
> (vTPM) implemented by a paravisor, trusted code running alongside Linux
> inside the protected VM. Its register page needs a private mapping so
> accesses reach the paravisor instead of host device emulation.
>
> The default ioremap() path maps device registers as shared. Without a
> VMware private-MMIO override, this also applies to the vTPM registers,
> preventing the guest from communicating with the paravisor's TPM.
>
> Install is_private_mmio() for the vTPM's single register page when guest
> memory encryption is active and firmware supplies a TPM event log. This
> lets ioremap() select a private mapping for the device. Hyper-V already
> does the same for its paravisor vTPM in hv_is_private_mmio(), added by
> commit 812b0597fb40 ("x86/hyperv: Change vTOM handling to use standard
> coco mechanisms").
>
> [ zack: Moved the include and explained the private-mapping requirement ]
>
> Signed-off-by: Alex James <alex.james@broadcom.com>
> Signed-off-by: Zack Rusin <zack.rusin@broadcom.com>
Sashiko has reviewed this patch and found no issues.
--
Sashiko AI review · https://sashiko.dev/#/patchset/e0e5389688fe4102b639c42295305e08f306a092.1793692366.git.zack.rusin@broadcom.com?part=1
prev parent reply other threads:[~2026-11-03 8:00 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-11-03 7:54 [PATCH] x86/vmware: Map vTPM as private in encrypted VMs Zack Rusin
2026-11-03 8:00 ` sashiko-bot [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=sashiko-outbox-194785@kernel.org \
--to=sashiko-bot@kernel.org \
--cc=eperezma@redhat.com \
--cc=mst@redhat.com \
--cc=sashiko-reviews@lists.linux.dev \
--cc=virtualization@lists.linux.dev \
--cc=zack.rusin@broadcom.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.